Launched January 6, 2026.png?width=160)
Sloggo
Minimal Syslog collector based on DuckDB
FreeOpen Source258 impressions#1823 of its week
Minimal RFC 5424 syslog collector and viewer based on DuckDB. Runs as a single, resource-friendly process.
Sloggo is a lightweight RFC 5424 syslog collector and viewer built on DuckDB that runs as a single process.
- for
- Developers and ops needing simple, low-resource log collection for small-to-medium setups.
- pricing
- open source
- license
- MIT
works withDockerPodmanDuckDB
Key features
6 features of Sloggo
- RFC 5424 ingestion — Collects syslog over TCP and UDP using the RFC 5424 protocol.
- Fast search & filtering — Provides real-time search, filtering and tailing of collected logs.
- High ingestion rate — Handles up to 1 million logs per second.
- Single-process design — Runs in one lightweight process under 10 MiB compressed size.
- Web UI — Clean modern interface built with data-table-filters for log exploration.
- Env-var configuration — All settings adjustable via environment variables, including ports and retention.
Use cases
- Collect device syslog streams in a Docker container for a dev environment
- Quickly tail and filter logs during troubleshooting of a small service
- Run a temporary log collector for demo or CI pipelines
- Store short-term logs for IoT gateways without a full ELK stack
Sloggo vs alternatives
.png?width=64) Sloggo | .jpg?width=64) OpenObserve |  Plausible | |
|---|---|---|---|
| Best for | Minimal self-hosted syslog collector | Comprehensive log analytics | Web traffic analytics |
| Pricing | Open source | Subscription | Subscription |
| DevHunt upvotes | 0 | 39 | 0 |
| Launched | Jan 2026 | Apr 2026 | — |
- Sloggo vs OpenObserve: Full-featured observability platform with long-term storage, unlike Sloggo’s minimal collector
- Sloggo vs Plausible: Privacy-focused web analytics, not a syslog collector
Sloggo FAQ
Is Sloggo ready for production use?+
No, it is in alpha and not recommended for critical or sensitive data.
How do I start Sloggo?+
Run the provided Docker image with the example command, setting ports and volumes as needed.
What log formats are supported?+
By default it parses RFC 5424, with optional fallback to RFC 3164 via the SLOGGO_LOG_FORMAT variable.
Does Sloggo provide security features?+
It has no built-in security layer; run it inside a private network or behind a secure reverse proxy.
What resources does Sloggo consume?+
It is a single-process binary under 10 MiB compressed and uses minimal CPU/memory.
Summarized by DevHunt from github.com · Oct 8, 2026. Details may change; check the official site.
